$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json) Hash identifier: 4pu0RFov70Rf8KLMtKLnQ7piiO33/aK30FvP0Ww2Dnc= Subject key identifier: 2E:5E:3E:7E:E8:93:AD:E8:9B:88:38:22:0A:A9:A7:60:40:AC:32:85 Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft Manifest number: 022E Signing time: Thu 23 Jul 2026 04:17:05 +0000 Manifest this update: Thu 23 Jul 2026 04:17:05 +0000 Manifest next update: Thu 30 Jul 2026 04:17:05 +0000 Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: 6Ogllp/WdYtT4lPJWIBCNSONVnZUEcpSKC77QNsvzqc=) 2: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: d0JlKivvI0UuN/+g7FjPgsMv6qjwloa3O1BziCQ3cTE=) 3: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: r/B/wTWM1e+RbFQV+OxoufBd8XhZQMs6+SrSBQGZEm0=) 4: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: yxoJxjt522RCtypxdpCWh8Ki8MQz+o9DlkQu175uTk8=) 5: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: kvLOqAvejoloIcBp8iOod+XLqcMm6Km2ICEQUCNEODY=) 6: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: CKjWrRKFrq5wIXerALs28X5SJv1uenx7ZdloeFQoUHo=) 7: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: sT56QjRFMA5RYNrfwK84aeqd2CWRIQx/z7cMGwk6r48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Jul 23 04:17:05 2026 GMT Not After : Jul 30 04:17:05 2026 GMT Subject: CN=6a6195c1-cc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:10:c9:31:44:b9:d5:8c:7f:0d:11:f3:31: cc:0d:34:69:0c:98:c7:ec:16:41:6b:ba:2d:1c:c9: 07:a4:a6:d0:c4:cb:c9:25:54:46:f6:c9:71:62:e0: 70:0e:84:2a:dc:98:42:0b:79:77:68:82:36:23:98: c1:44:f4:a3:97:85:1b:7e:62:f2:78:5f:70:d2:ec: 36:ef:db:b5:70:b8:df:85:79:b8:f0:72:13:f6:40: 61:26:6b:5d:6f:e9:e9:0e:45:cf:5e:fe:36:c0:82: eb:a1:fd:b5:cc:e0:ee:13:91:04:82:e9:ca:2a:fe: d7:76:ce:84:38:04:8b:be:a4:d4:f9:af:11:7e:28: 01:e1:00:31:0d:94:3f:95:3f:b4:5f:37:e4:14:ff: 3a:10:98:07:6a:3c:93:20:d0:d1:8a:52:32:b0:84: 18:47:b6:3c:6f:7b:8f:b8:70:da:8f:20:bd:32:04: 4f:ba:00:05:30:3a:16:00:46:54:15:09:87:60:57: 68:49:07:93:1d:47:80:21:10:62:6b:ec:63:a3:d9: 99:ca:53:df:45:c5:ad:d1:9f:a8:5f:c2:54:7a:1e: 63:da:55:fa:ec:bc:a5:56:37:3b:5f:b4:21:81:24: d1:26:64:68:e3:de:32:66:6f:aa:ca:16:e0:27:5d: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:3E:7E:E8:93:AD:E8:9B:88:38:22:0A:A9:A7:60:40:AC:32:85 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:38:75:3a:5e:67:37:68:11:9f:eb:10:a1:07:bb:06:1d:85: d1:81:36:5a:90:ea:c8:73:6d:fb:7b:ec:84:ae:a0:ab:1b:71: 1d:62:00:27:8d:db:14:e6:d0:ad:04:05:6b:43:c3:d4:c0:d2: 89:3f:bd:6a:86:06:b4:ef:26:84:51:71:7e:ba:f2:b9:0e:5c: 0c:6c:64:cf:b2:66:34:47:d6:b0:30:44:ae:46:2d:d9:76:8a: 5a:7f:09:50:99:cc:26:aa:91:ce:cd:21:91:56:ad:96:a8:63: fa:01:c8:e2:c1:ba:b2:75:97:37:d9:a8:01:7b:08:52:4f:d7: 84:6b:4e:1f:6e:26:f4:b1:73:e3:cc:25:9d:b8:b0:a2:9e:8a: 3f:db:d2:a0:21:b3:22:21:42:64:41:52:f5:92:2c:2f:4c:76: 69:12:66:7f:1d:15:7f:12:76:95:df:fe:df:19:5b:67:84:bd: ee:a4:de:8d:e1:a5:76:3e:ab:39:85:00:7f:2a:3a:72:08:74: 35:1a:7e:2a:72:c8:70:78:b6:3d:25:31:e2:f8:03:53:1f:5f: 03:a2:8d:cc:10:dc:67:c9:23:e2:d4:32:a7:19:28:86:65:80: c1:9a:1f:a8:1a:bc:2f:70:fa:f3:58:2b:d1:43:2f:b1:4c:48: 0e:2b:78:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwNzIzMDQxNzA1WhcNMjYwNzMwMDQxNzA1WjAYMRYwFAYD VQQDEw02YTYxOTVjMS1jYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfAQyTFEudWMfw0R8zHMDTRpDJjH7BZBa7otHMkHpKbQxMvJJVRG9slxYuBw DoQq3JhCC3l3aII2I5jBRPSjl4UbfmLyeF9w0uw279u1cLjfhXm48HIT9kBhJmtd b+npDkXPXv42wILrof21zODuE5EEgunKKv7Xds6EOASLvqTU+a8RfigB4QAxDZQ/ lT+0XzfkFP86EJgHajyTINDRilIysIQYR7Y8b3uPuHDajyC9MgRPugAFMDoWAEZU FQmHYFdoSQeTHUeAIRBia+xjo9mZylPfRcWt0Z+oX8JUeh5j2lX67LylVjc7X7Qh gSTRJmRo494yZm+qyhbgJ13yjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5ePn7o k63om4g4Igqpp2BArDKFMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq TGwwel9zY3ZwME1fU2M0cG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDh1Ol5nN2gRn+sQoQe7Bh2F0YE2WpDqyHNt+3vshK6gqxtxHWIAJ43bFObQ rQQFa0PD1MDSiT+9aoYGtO8mhFFxfrryuQ5cDGxkz7JmNEfWsDBErkYt2XaKWn8J UJnMJqqRzs0hkVatlqhj+gHI4sG6snWXN9moAXsIUk/XhGtOH24m9LFz48wlnbiw op6KP9vSoCGzIiFCZEFS9ZIsL0x2aRJmfx0VfxJ2ld/+3xlbZ4S97qTejeGldj6r OYUAfyo6cgh0NRp+KnLIcHi2PSUx4vgDUx9fA6KNzBDcZ8kj4tQypxkohmWAwZof qBq8L3D681gr0UMvsUxIDit4rQ== -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:55 2026 by rpki-client